Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HvVlpQEn4NR917LU87y08FgM-ro.roa
File:                     HvVlpQEn4NR917LU87y08FgM-ro.roa (raw, json)
Hash identifier:          MVoZIzr5k9P+XCKX2Qm6jIWrUayV+bc9BFAG7NpqijM=
Subject key identifier:   1E:F5:65:A5:01:27:E0:D4:7D:D7:B2:D4:F3:BC:B4:F0:58:0C:FA:BA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0229
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HvVlpQEn4NR917LU87y08FgM-ro.roa
Signing time:             Mon 01 May 2023 01:37:58 +0000
ROA not before:           Mon 01 May 2023 01:37:58 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.169.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:58 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=1EF565A50127E0D47DD7B2D4F3BCB4F0580CFABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:a0:f8:0c:d4:ef:e7:08:12:be:6b:3d:a7:
                    04:67:53:27:cb:6e:1a:01:a6:b4:0e:57:11:6d:1b:
                    94:64:8c:59:be:8c:dc:90:57:cc:fb:78:86:be:5d:
                    c1:c1:ff:80:ea:a7:d2:4b:99:22:ad:1b:c5:11:20:
                    84:59:db:5c:7a:4a:0d:5b:9c:4d:95:88:27:73:dc:
                    a4:98:63:b7:a5:dd:4d:09:c8:bb:c1:a2:95:db:f1:
                    a3:a8:ce:c5:15:4c:5f:70:f2:f7:13:67:c0:b4:48:
                    f5:3c:0d:af:0f:08:86:92:55:3a:d9:0e:42:b5:01:
                    9e:f5:e9:95:13:ad:c0:0a:05:7f:a1:7f:4a:74:de:
                    80:e7:4d:bb:fb:a3:ff:c7:61:77:94:ec:43:46:c6:
                    22:b5:1e:d0:64:cb:20:3a:19:42:be:58:8b:d0:21:
                    e3:50:9d:e3:c8:62:4b:6c:b7:c3:3d:af:5a:01:cf:
                    c0:97:8d:af:78:18:d8:63:d8:8f:a6:f8:74:1b:61:
                    8f:26:7b:d6:9f:64:96:fb:4d:77:36:5f:0b:38:be:
                    0e:4e:62:0c:2e:0a:ae:86:2b:48:e4:b4:31:85:9e:
                    87:10:02:35:82:36:30:f0:08:f2:61:82:e9:c1:f7:
                    df:eb:a1:22:43:e8:70:53:2a:07:d3:b5:08:eb:94:
                    86:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F5:65:A5:01:27:E0:D4:7D:D7:B2:D4:F3:BC:B4:F0:58:0C:FA:BA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HvVlpQEn4NR917LU87y08FgM-ro.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.169.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4b:60:e1:54:34:5a:d5:7c:a4:7f:12:a3:f2:df:75:c8:81:c7:
         bd:ad:60:27:45:cf:8a:08:89:0f:9d:f7:3b:4d:8e:0b:84:0a:
         26:49:50:cd:92:b7:03:12:47:d7:18:10:96:f2:49:f3:2a:12:
         1b:34:b0:d9:c4:4c:ea:ef:53:94:12:3d:c7:36:24:76:01:67:
         3d:60:97:a6:66:4c:35:4a:68:37:8b:33:54:d3:93:6a:09:38:
         ff:f7:dc:46:ba:39:d7:d8:10:e4:af:4c:08:4a:f3:44:c3:19:
         95:1f:8f:88:fe:97:99:ca:f6:da:03:30:28:27:26:b9:45:ba:
         9e:06:25:0a:4b:e1:19:22:27:9e:8d:99:c2:34:74:14:b7:27:
         9a:91:01:f9:0b:c0:ed:f0:5f:d1:46:27:b8:b1:9e:05:e6:17:
         ce:11:a7:64:66:e5:5c:ef:ff:f5:d3:1a:de:48:e8:09:9e:9c:
         ec:b8:c4:44:bb:4a:ae:1e:c8:8b:48:d7:b9:bb:0e:62:3e:ad:
         dd:e4:91:21:37:53:46:ed:da:2d:91:77:ec:16:e0:8f:0a:d0:
         8d:db:71:09:3a:0a:b8:68:50:6e:d0:07:bb:fb:26:61:a5:34:
         e1:ef:17:3e:bc:13:da:90:e7:33:59:eb:fc:74:f8:59:65:af:
         55:42:9e:2b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTM3NThaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDFFRjU2NUE1MDEyN0Uw
RDQ3REQ3QjJENEYzQkNCNEYwNTgwQ0ZBQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNeaD4DNTv5wgSvms9pwRnUyfLbhoBprQOVxFtG5RkjFm+jNyQ
V8z7eIa+XcHB/4Dqp9JLmSKtG8URIIRZ21x6Sg1bnE2ViCdz3KSYY7el3U0JyLvB
opXb8aOozsUVTF9w8vcTZ8C0SPU8Da8PCIaSVTrZDkK1AZ716ZUTrcAKBX+hf0p0
3oDnTbv7o//HYXeU7ENGxiK1HtBkyyA6GUK+WIvQIeNQnePIYktst8M9r1oBz8CX
ja94GNhj2I+m+HQbYY8me9afZJb7TXc2Xws4vg5OYgwuCq6GK0jktDGFnocQAjWC
NjDwCPJhgunB99/roSJD6HBTKgfTtQjrlIYtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUHvVlpQEn4NR917LU87y08FgM+rowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0h2VmxwUUVuNE5SOTE3TFU4N3kwOEZnTS1yby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfSqQAwDQYJKoZIhvcNAQELBQADggEBAEtg4VQ0WtV8pH8So/LfdciBx72t
YCdFz4oIiQ+d9ztNjguECiZJUM2StwMSR9cYEJbySfMqEhs0sNnETOrvU5QSPcc2
JHYBZz1gl6ZmTDVKaDeLM1TTk2oJOP/33Ea6OdfYEOSvTAhK80TDGZUfj4j+l5nK
9toDMCgnJrlFup4GJQpL4RkiJ56NmcI0dBS3J5qRAfkLwO3wX9FGJ7ixngXmF84R
p2Rm5Vzv//XTGt5I6AmenOy4xES7Sq4eyItI17m7DmI+rd3kkSE3U0bt2i2Rd+wW
4I8K0I3bcQk6CrhoUG7QB7v7JmGlNOHvFz68E9qQ5zNZ6/x0+Fllr1VCnis=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org